General

  • Target

    87faf8801fcfdabd79702399462e2185_JaffaCakes118

  • Size

    72KB

  • MD5

    87faf8801fcfdabd79702399462e2185

  • SHA1

    084bfb2d0398b49dd2ae614807e0c282c96c781d

  • SHA256

    5acfb8d315e0a1fa18e7251a752a9ba7f080b42fe5bd070e7b8f98b000ccd50f

  • SHA512

    4e6ef5ef1f73ef4beb44ba10a109149355e5353573ea7c71eb9b2b86b7cc47a90599c56e915cfebe481ddea8b1d248844dd2021c6de8c05a641bf1f0e8953f9c

  • SSDEEP

    1536:IZOt68/RKqcaaXa+DP6rRZQGp5orUxkpohqcRA4Mb+KR0Nc8QsJq39:4Ot5/oqca4a+WrRZQGTB24qc64e0Nc84

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

205.234.236.20:4411

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 87faf8801fcfdabd79702399462e2185_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections